Staff Federal Security Compliance Analyst

Get to know Okta

Okta is The World’s Identity Company. We free everyone to safely use any technology—anywhere, on any device or app. Our Workforce and Customer Identity Clouds enable secure yet flexible access, authentication, and automation that transforms how people move through the digital world, putting Identity at the heart of business security and growth. 

At Okta, we celebrate a variety of perspectives and experiences. We are not looking for someone who checks every single box - we’re looking for lifelong learners and people who can make us better with their unique experiences. 

Join our team! We’re building a world where Identity belongs to you.

This position is for a Staff Federal Security Compliance Analyst on the Okta Federal Security and Compliance team. This team’s mission is to strengthen Okta’s position as the leading Identity-as-a-Service solution through a security-first approach to compliance. This team is largely focused on working with internal and external stakeholders to maintain our FedRAMP authorizations for our Okta government systems. 

As a Staff Federal Security Compliance Analyst on this team, you will support security initiatives by engaging various process owners in the design, documentation, implementation, monitoring of the appropriate controls in our computing environments. This candidate will also work with internal and external stakeholders to improve our compliance posture, security controls, and compliance related processes. 

The ideal candidate will have hands-on experience with the technical implementation or evaluation of FedRAMP Moderate, High, DoD Impact Level 4 and Level 5 controls in cloud-based environments using tools such as Okta, AWS, ServiceNow, JIRA, and others. This position requires a unique set of skills including project management, technical competency, knowledge of federal compliance frameworks, and an eye towards future standards and regulations that will impact federal service offerings.

Job Duties and Responsibilities:

• Work with internal and external stakeholders to support FedRAMP and DoD audits of the company’s federal cloud offerings
• Collaborate with team members and engineering stakeholders to manage continuous monitoring program across all federal environments, including internal and external reporting on vulnerabilities and developing continuous monitoring presentations
• Work with process and control owners to help them understand the control requirements, audit results, and provide advisory around remediation options
• Interpret requirements across multiple compliance frameworks (specifically FedRAMP), and provide clarification to engineering teams seeking compliance advice 
• Assess security and compliance impact of changes to the federal systems and …